Skip to content

planner: make some show stmt more fine-grained privilege check#35493

Merged
ti-chi-bot merged 9 commits intopingcap:masterfrom
likzn:fix_privige
Jun 21, 2022
Merged

planner: make some show stmt more fine-grained privilege check#35493
ti-chi-bot merged 9 commits intopingcap:masterfrom
likzn:fix_privige

Conversation

@likzn
Copy link
Contributor

@likzn likzn commented Jun 18, 2022

What problem does this PR solve?

Issue Number: close #35393

Problem Summary: mysql.stats_meta,mysql.stats_buckets,mysql.stats_histograms were in the SystemDB. So we can make a more fine-grained privilege check and grant

What is changed and how it works?

Check List

Tests

  • Unit test
  • Integration test
  • Manual test (add detailed scripts or steps below)
  • No code

Side effects

  • Performance regression: Consumes more CPU
  • Performance regression: Consumes more Memory
  • Breaking backward compatibility

Documentation

  • Affects user behaviors
  • Contains syntax changes
  • Contains variable changes
  • Contains experimental features
  • Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

@ti-chi-bot
Copy link
Member

ti-chi-bot commented Jun 18, 2022 •
edited
Loading

[REVIEW NOTIFICATION]

This pull request has been approved by:

  • jackysp
  • tangenta

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Details

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

@ti-chi-bot ti-chi-bot added release-note-none Denotes a PR that doesn't merit a release note. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Jun 18, 2022
@likzn
Copy link
Contributor Author

likzn commented Jun 20, 2022

PTAL /cc @tangenta @jackysp

@likzn
Copy link
Contributor Author

likzn commented Jun 20, 2022

/cc @tangenta @jackysp

@ti-chi-bot ti-chi-bot requested review from jackysp and tangenta June 20, 2022 11:30
@ti-chi-bot ti-chi-bot added the status/LGT1 Indicates that a PR has LGTM 1. label Jun 21, 2022
@tangenta
Copy link
Contributor

tangenta commented Jun 21, 2022

@likzn Please also update the test TestAuditLogNormal.

@sre-bot
Copy link
Contributor

sre-bot commented Jun 21, 2022 •
edited
Loading

Code Coverage Details: https://codecov.io/github/pingcap/tidb/commit/2246fa3765f5f8c4088a6bd58a38ca887591317c

@likzn
Copy link
Contributor Author

likzn commented Jun 21, 2022

@likzn Please also update the test TestAuditLogNormal.

Done

jackysp
jackysp approved these changes Jun 21, 2022
View reviewed changes
Copy link
Contributor

@jackysp jackysp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ti-chi-bot ti-chi-bot added status/LGT2 Indicates that a PR has LGTM 2. and removed status/LGT1 Indicates that a PR has LGTM 1. labels Jun 21, 2022
@jackysp
Copy link
Contributor

jackysp commented Jun 21, 2022

Thanks for your contribution, @likzn !

@jackysp
Copy link
Contributor

jackysp commented Jun 21, 2022

/merge

@ti-chi-bot
Copy link
Member

ti-chi-bot commented Jun 21, 2022

This pull request has been accepted and is ready to merge.

DetailsCommit hash: 5c9495d

@ti-chi-bot ti-chi-bot added the status/can-merge Indicates a PR has been approved by a committer. label Jun 21, 2022
@hawkingrei
Copy link
Member

hawkingrei commented Jun 21, 2022

/run-mysql-test

@hawkingrei
Copy link
Member

hawkingrei commented Jun 21, 2022

/run-check_dev_2

@likzn
Copy link
Contributor Author

likzn commented Jun 21, 2022

/run-mysql-test

@hawkingrei
Copy link
Member

hawkingrei commented Jun 21, 2022

/run-mysql-test

@ti-chi-bot ti-chi-bot merged commit ff1b6ff into pingcap:master Jun 21, 2022
@sre-bot
Copy link
Contributor

sre-bot commented Jun 21, 2022

TiDB MergeCI notify

CI Name Result Duration Compare with Parent commit
idc-jenkins-ci/integration-cdc-test 🟢 all 35 tests passed 26 min Existing passed
idc-jenkins-ci-tidb/integration-common-test 🟢 all 11 tests passed 15 min Existing passed
idc-jenkins-ci-tidb/common-test 🟢 all 12 tests passed 10 min Existing passed
idc-jenkins-ci-tidb/sqllogic-test-1 🟢 all 26 tests passed 6 min 59 sec Existing passed
idc-jenkins-ci-tidb/integration-ddl-test 🟢 all 6 tests passed 6 min 47 sec Existing passed
idc-jenkins-ci-tidb/sqllogic-test-2 🟢 all 28 tests passed 6 min 1 sec Existing passed
idc-jenkins-ci-tidb/tics-test 🟢 all 1 tests passed 5 min 0 sec Existing passed
idc-jenkins-ci-tidb/integration-compatibility-test 🟢 all 1 tests passed 3 min 9 sec Existing passed
idc-jenkins-ci-tidb/mybatis-test 🟢 all 1 tests passed 2 min 59 sec Existing passed
idc-jenkins-ci-tidb/plugin-test 🟢 build success, plugin test success 4min Existing passed

morgo added a commit to morgo/tidb that referenced this pull request Jun 21, 2022
@morgo
Merge remote-tracking branch 'upstream/master' into add-bootstrap-sql
d5c463f 
* upstream/master:
  planner: make some `show stmt` more fine-grained privilege check (pingcap#35493)
  session: improve bootstrap code (pingcap#34755)
  *: upgrade go-proxyprotocol version (pingcap#35560)
  planner: introduce new cost formula for MPPAggs (pingcap#35436)
@likzn likzn deleted the fix_privige branch June 22, 2022 01:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jackysp jackysp jackysp approved these changes

@tangenta tangenta tangenta approved these changes

Assignees

No one assigned

Labels

release-note-none Denotes a PR that doesn't merit a release note. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. status/can-merge Indicates a PR has been approved by a committer. status/LGT2 Indicates that a PR has LGTM 2.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

show stats_meta needs select privileges of all tables in database mysql

6 participants

@likzn @ti-chi-bot @tangenta @sre-bot @jackysp @hawkingrei